The catch is that your private key is everything: if someone gets it, they can sign commits as you and potentially slip malicious code into your projects while looking completely legitimate. Keep your ...